DP6 - Commerce
| ID: | ML-Draft-010 |
| Title: | DP6 - Commerce |
| Status: | approved |
| Authors: | The Meta-Layer Initiative |
| Group: | N/A |
| Date: | 2026-05-04 |
| Revision: | 00 |
| Pages: | 9 |
| Words: | 4295 |
DP6 redefines digital commerce as governed exchange rather than optimized extraction. It requires that pricing, fees, risks, and responsibilities be fully legible at the point of transaction, with enforceable guarantees that persist across systems. The draft introduces transaction objects, settlement proofs, and policy-bound commerce flows to prevent manipulation through hidden fees, dark patterns, or AI-driven persuasion. It emphasizes symmetry between entry and exit, separation of payments from surveillance, and community participation in economic value. In short: if users can’t clearly see how money moves, the system isn’t a market—it’s a maze.
This draft articulates Desirable Property 6 (DP6) as the condition under which value exchange in the meta-layer is fair, legible, and aligned with human and community flourishing, not reducible to extraction, dark patterns, or attention rents dressed as markets.
Commerce is not an add-on to the meta-layer. It is how incentives (DP9), ownership (DP20), and sustainability (DP17) become real.
DP6 therefore defines the minimum conditions under which exchange remains trustworthy at the interface where money moves and value is recognized.
Commerce is the highest-value attack surface in the meta-layer. Systems that appear fair locally but fail across system boundaries, delegation, or routing layers will be systematically exploited.
DP6 connects to:
If DP6 is weak, predictable failures follow: surveillance advertising as hidden tax, fee obfuscation, lock-in through proprietary rails, platform capture of creator revenue, and AI-mediated manipulation at conversion.
DP6 does not prescribe a specific payment rail, currency, or chain. It defines legitimacy conditions for commerce in the meta-layer.
In today’s web, commerce is fused with attention manipulation and opacity.
Participants encounter:
This produces recurring failures:
These failures are structural. When transparency and portability are optional, extraction dominates.
DP6 reframes commerce as governed exchange: visible rules, bounded automation, and enforceable fairness at the point of transaction.
Participants cannot see effective take rates across layers.
Example: A creator sees a platform fee but not downstream processing, ranking, or conversion costs.
Why this matters: Fairness requires full distribution visibility.
Design exploits cognitive load to increase conversion.
Example: A free trial converts with hidden renewal and hard-to-find cancellation.
Why this matters: Coercive commerce violates DP2 agency.
“Free” is subsidized by hidden data extraction.
Example: Ad SDKs exfiltrate unrelated data to fund access.
Why this matters: Externalities shift cost to users without consent (DP4).
Value cannot exit proprietary rails.
Example: Credits and reputation cannot be ported without loss.
Why this matters: Undermines DP7 interoperability and DP4 export.
Agents steer decisions without accountability.
Example: Assistants recommend higher-commission products as “best”.
Why this matters: Requires DP11 disclosure and DP13 bounds.
Economic activity uses community trust without funding it.
Example: Marketplaces leverage forums without contributing to moderation or safety.
Why this matters: Violates DP20 ownership and DP17 sustainability.
Fees, taxes, and currencies are unclear.
Example: Display currency differs from settlement with hidden spreads.
Why this matters: Legibility must include jurisdictional honesty.
Dynamic pricing or credit targets vulnerable users.
Example: BNPL prompts cluster around financially stressed users.
Why this matters: Intersects DP4 inference limits and DP11 ethics.
Default assistants route to house inventory.
Example: “Buy now” prioritizes sibling brands under “personalization”.
Why this matters: Requires disclosure and contestability.
Commerce terms, attribution, or protections change or become exploitable when transactions, identities, or value move across systems.
Example: A checkout with full fee disclosure exports to a partner flow where additional fees are added post-commitment, or a refund policy is not honored after handoff.
Why this matters: Commerce that fails at system boundaries enables arbitrage and hidden extraction.
Commerce in the meta-layer is fair only when pricing, fees, risks, and responsibilities are legible at the point of exchange; defaults are non-exploitative; automation and AI assistance are accountable and bounded; and communities can shape and, where appropriate, capture economic activity that depends on shared trust and infrastructure.
Example: A checkout shows item price, full fee breakdown, data uses tied to the transaction, AI involvement, cancellation path, and any community surcharge with a link to governance.
What this feels like: Paying feels like choosing, not being herded.
Commerce guarantees must remain valid not only within a single interface, but across the systems, tools, and contexts where transactions are initiated, routed, and settled.
When commerce flows cross systems, pricing, fees, policies, and responsibilities must either:
Commerce that becomes opaque at handoff points is structurally unsafe.
Commerce in the meta-layer cannot rely on interface clarity alone. It must be anchored in a substrate that binds pricing, allocation, and settlement to verifiable, enforceable structures. Without this, even well-designed interfaces can be subverted downstream, where actual value movement occurs.
DP6 therefore defines a commerce layer composed of primitives that make exchange legible, auditable, and governable across the full lifecycle of a transaction, from intent to settlement to dispute.
Transactions are not ephemeral UI events. They are structured, machine-readable objects that encode the full economic reality of an exchange. This includes itemized pricing, discounts, fee distribution, data use, jurisdictional context, and the governing policies at the moment of commitment.
By binding these elements together, transaction objects ensure that what a participant sees at checkout is not merely descriptive, but enforceable. This is what connects commerce to executable policy (DP12).
A failure mode here is selective omission or delayed disclosure, where certain fees or conditions are only materialized after commitment. Systems must therefore ensure that transaction objects are complete before commitment and immutable afterward except through governed updates.
Fee structures must be computable and attributable prior to commitment, not inferred after settlement. This includes platform fees, payment processing costs, ranking or promotion adjustments, and any community-level surcharges.
Rather than presenting fees as a flat percentage or opaque deduction, the system must expose how value is distributed across all participating layers. This enables participants to understand not only the price, but the economic structure behind it.
The primary attack surface here is fee fragmentation, where costs are distributed across layers in ways that are individually legible but collectively opaque. DP6 requires that fee objects recombine into a clear total cost of participation.
Settlement must be provable, not assumed. Participants and communities need to be able to trace how value moved: who received what, when, and under what conditions.
Settlement proofs create continuity between intent and outcome. Without them, systems can display one set of expectations at checkout and execute another at settlement.
Failure modes include delayed settlement visibility, partial disclosure of recipients, or selective omission of intermediary captures. Systems must treat settlement as a first-class observable state, not a backend detail.
Zones and communities attach policy objects directly to transactions. These are not advisory rules; they execute at runtime and shape what is allowed, required, or disallowed in a transaction.
This includes restrictions on categories, required disclosures, surcharge logic, and AI usage constraints. The key shift is that commerce behavior is governed at the point of execution, not after harm occurs.
The adversarial pressure here is policy bypass through integration pathways. Transactions must carry their governing policy context with them across systems or explicitly signal where enforcement no longer holds.
AI participation in commerce must be visible, attributable, and bounded. This includes pricing adjustments, ranking decisions, bundling, and negotiation.
Participants must be able to distinguish between neutral presentation and optimized persuasion. Without this, AI becomes a hidden incentive layer that distorts economic decisions.
A critical failure mode is undisclosed optimization, where AI systems steer users toward outcomes that maximize commission or retention while presenting themselves as neutral assistants.
Participants must be able to leave economic relationships without disproportionate friction. This includes exporting receipts, transaction history, and where supported, balances or entitlements.
Portability is not only a convenience feature; it is a constraint on extraction. Systems that make exit costly create economic capture even when pricing appears fair.
The adversarial pattern here is soft lock-in, where exit is technically possible but practically costly due to fragmentation of records, identity, or value.
Every transaction should produce an evidence bundle that can be used in dispute resolution. This includes signed receipts, policy state at the time of purchase, and clear identification of responsible parties.
This shifts dispute resolution from subjective interpretation to evidence-based adjudication. It also creates incentives for systems to maintain accurate and complete records.
Failure modes include missing policy context, unverifiable receipts, or ambiguity about responsibility across multi-party transactions.
Commerce systems must retain a structured memory of transactions and policy evolution. This includes prior fee structures, changes in rules, and the outcomes of disputes.
This historical layer enables accountability over time and allows communities to detect drift toward extraction or manipulation.
Without commerce memory, each transaction exists in isolation, making systemic issues difficult to detect and correct.
These primitives transform commerce from a series of isolated interactions into a coherent, governable system that can withstand adversarial pressure and evolve over time.
Fee transparency is not simply about showing a number. It is about ensuring that participants can understand the full economic structure of a transaction before they commit.
In many systems, fees are fragmented across layers—platform fees, payment processing, ranking adjustments, or currency spreads—each of which may be individually legible but collectively opaque. This creates a situation where the true cost of participation cannot be known until after settlement.
DP6 requires that effective fees be computable before commitment, not reconstructed after the fact. Participants must be able to see the full take rate across all layers in a way that is coherent and comparable.
A core failure mode is fee fragmentation, where systems distribute costs in ways that obscure total extraction. Systems must therefore recombine all fee components into a clear, pre-commitment view of total cost.
Defaults are one of the most powerful levers in commerce systems. When defaults are misaligned, even transparent systems can become coercive in practice.
DP6 requires that material commitments be opt-in, not opt-out, and that reversal paths such as cancellation or refund follow the same level of friction as signup. This creates symmetry between entry and exit, which is essential for real agency (DP2).
A common failure mode is asymmetrical friction, where signup is immediate but cancellation is buried, delayed, or requires additional steps. Systems must treat reversibility as a first-class design constraint, not a secondary feature.
Commerce systems often bundle payment with data extraction, turning transactions into opportunities for surveillance. This creates hidden costs that are not reflected in price.
DP6 requires that payment does not require unrelated data processing (DP4). The data required to complete a transaction must be limited to what is strictly necessary, and any additional data use must be explicitly disclosed and optional.
A key failure mode is covert bundling, where data collection is technically optional but practically unavoidable. Systems must ensure that participants can complete transactions without consenting to unrelated data flows.
Value must be able to move without losing meaning, ownership, or accountability. When value is trapped within proprietary systems, participants are subject to platform-defined rules that cannot be contested or exited.
DP6 therefore prefers open protocols and requires export and audit capabilities for closed systems (DP7). Participants must be able to move balances, receipts, and transaction history without losing integrity.
A primary failure mode is economic lock-in, where value can technically be withdrawn but at significant loss or friction. Systems must treat portability as a constraint on extraction, not an optional feature.
Commerce systems depend on contributors whose work generates value, yet those contributors are often the least protected participants in the system.
DP6 requires that attribution and payouts be tamper-evident and that disputes be resolved in a timely and transparent manner. Contributors must be able to verify how their work is valued and compensated.
A failure mode here is delayed or opaque payout logic, where contributors cannot trace how their compensation was calculated or why it changed. Systems must ensure that payout logic is both visible and contestable.
Communities create the conditions under which commerce is trusted, yet often lack the ability to shape the economic activity that depends on them.
DP6 enables zones to impose rules, surcharges, or bans with executable policy (DP12). This allows communities to align commerce with their values and to capture a portion of the value generated within their environments.
A key failure mode is extraction without reciprocity, where economic activity leverages community trust without contributing to its maintenance. Systems must ensure that communities can define and enforce economic participation terms.
Not all transactions carry the same level of risk. High-stakes categories such as financial products, healthcare, or legal services require additional safeguards.
DP6 requires human confirmation or expert gating for sensitive categories. This ensures that automation and AI do not make consequential decisions without appropriate oversight.
A failure mode is over-automation, where systems optimize for efficiency at the cost of safety. Systems must introduce friction where necessary to prevent harm.
Commerce systems do not exist in isolation. They depend on shared infrastructure, communities, and public goods that must be maintained over time.
DP6 requires that fees transparently fund commons maintenance (DP17). This creates a visible link between economic activity and the sustainability of the systems that support it.
A failure mode is invisible extraction, where value is removed from ecosystems without reinvestment. Systems must make sustainability contributions explicit and traceable.
Receipts are not merely confirmations of payment. They are the foundation of accountability in commerce systems.
DP6 requires machine-readable receipts that support fair resolution (DP15). These receipts must include sufficient detail to reconstruct the transaction and its governing conditions.
A failure mode is incomplete or unverifiable receipts, which make disputes difficult or impossible to resolve. Systems must treat receipts as evidence, not just records.
Commerce must be accessible to all participants, regardless of ability, device, or connectivity constraints.
DP6 requires that checkout and transaction flows work across assistive technologies and low-bandwidth contexts. Accessibility is not only a usability concern, but a fairness constraint.
A failure mode is exclusion by design, where systems assume high bandwidth, modern devices, or specific interaction patterns. Systems must ensure that economic participation is not gated by technical privilege.
Commerce systems must preserve the relationship between price, fee, policy, and settlement across environments.
This includes:
Commerce must not be portable in ways that enable hidden fees, policy resets, or accountability gaps.
Commerce is increasingly mediated not just by humans, but by agents acting on behalf of participants. These agents may search, negotiate, bundle, and execute transactions across multiple systems without direct human interaction at each step.
DP6 requires that agent-to-agent commerce remains legible, bounded, and accountable at the same level as human-facing transactions.
This includes:
A critical failure mode is delegated opacity, where agents transact in ways that are technically valid but practically uninspectable, allowing hidden fees, biased routing, or exploitative bundling.
Systems must ensure that delegation does not reduce accountability. Agent-mediated commerce must remain reconstructable, auditable, and interruptible by participants and governance systems.
Commerce is not neutral infrastructure. It encodes choices about power, risk, and value distribution, often in ways that are invisible to participants. In many systems, these choices are embedded in defaults, routing logic, or fee structures that cannot be contested or even observed.
DP6 requires that these choices become visible and governable at the point of transaction. This means participants are not only protected from harm, but able to understand and shape the economic conditions they are subject to.
Without these surfaces, commerce systems revert to extraction: participants transact, but cannot see how value flows, cannot challenge outcomes, and cannot meaningfully exit or redirect the system.
Participants must be able to:
Participants must also be able to understand how commerce terms change across systems.
This includes:
Participants must not be required to reverse-engineer commerce conditions across environments.
Communities must be able to:
Example: A community zone bans predatory lending ads and requires fee disclosures for all financial products. Enforcement occurs at runtime through policy binding, not moderator memory.
Commerce determines where value accumulates. Incentives determine how that value is pursued.
In many systems, pricing and ranking are optimized for conversion and revenue, while governance claims prioritize safety or fairness. This creates a structural mismatch where economic incentives override stated values.
DP6 requires incentive legibility within commerce systems:
Example: A marketplace ranks products based on commission rather than relevance, while presenting results as “best match.”
Why this matters: When incentives are hidden, markets become extraction systems. When visible, they become governable.
DP6 therefore expects:
Power also concentrates when commerce fragments across systems.
Actors who control routing, aggregation, or interface layers can reshape pricing, visibility, or policy without formally changing them.
DP6 therefore requires resistance to cross-system arbitrage, where value is extracted through boundary manipulation rather than contribution or service.
Across ecosystems, consistent signals point to structural failures in commerce design. These are not isolated grievances, but recurring patterns that reveal where systems break under real-world use.
Participants repeatedly encounter environments where economic behavior is shaped by hidden incentives, opaque fee structures, and limited recourse. Over time, this produces erosion of trust, disengagement from participation, and migration toward systems perceived as more fair or legible.
Common signals include:
These signals reflect a deeper pattern: participants are not rejecting commerce itself, but commerce that is misaligned with their understanding of fairness, agency, and contribution.
DP6 treats these signals as design inputs, not complaints. They indicate where economic systems fail to align with human expectations and where intervention is required.
DP6 does not:
DP6 defines the conditions under which exchange is legitimate and non-coercive.
A DP6-aligned commerce system should, at minimum:
Partial compliance that omits execution, auditability, or exit should not be treated as alignment.
Key open questions include:
These questions sit at the intersection of economic design, governance, and law.
DP6 connects commerce to the full meta-layer system:
DP6 is where these properties converge into real economic behavior.
DP6 assumes that commerce systems will be pressured toward opacity, capture, and manipulation. This pressure increases with scale, competition, and the introduction of automation and agent-mediated transactions.
Common failure paths include:
These failures rarely occur as singular events. They emerge gradually as systems optimize for short-term metrics, allowing small deviations from fairness to accumulate into systemic extraction.
DP6 therefore requires designing safeguards in advance:
Designers must also assume that commerce will be attacked at system boundaries.
Common boundary failure paths include:
In agent-mediated environments, additional failure modes emerge:
DP6-compliant systems include detection, signaling, and governance responses for these failures. They treat commerce not as a static system, but as an adversarial environment that must be continuously monitored and corrected.
Failure is expected. Invisible failure is not.
Advancing DP6 toward ML-RFC requires:
Progress should be demonstrated through working systems, not only conceptual agreement.
DP6 is where the meta-layer proves whether it can support real economic life without reverting to extraction.
Fair commerce is not the opposite of innovation. It is the condition under which innovation remains trustworthy.
When DP6 is strong, participants can pay, earn, and fund commons with clarity, agency, and dignity.
When it is weak, every other property is undermined at the moment money changes hands.
DP6 is where the meta-layer proves it is not building another opaque marketplace.
Fair commerce is the condition under which innovation does not depend on misdirection.
When DP6 is strong, people can pay, earn, and fund commons without trading away dignity or control.
Commerce that fails under interoperability pressure is not fair commerce. DP6 requires that fairness survive movement.
Related documents would appear here in the real datatracker.